Java update for Netbackup 7.1

[cyberninja]

Hello,

I'm hardening my servers and the java used buy NetBackup 7.1 is out of date. Can someone please tell me how I can update the java version.

I called the helpdesk but all they don't seem to get it. They gave me this link http://www.symantec.com/docs/TECH181132. This webpage has some patches that will take my servers and clients from 7.1.0.2  to 7.1.0.4. The webpage doen't say if it updates the java NetBackup uses.

Current java level of Java in NetBackup 1.6.0_26

Current level Oracle Java is updated to 1.6.0_33

To check the java version NetBackup uses you do this. (example on a Solaris 10)
find / -name java -type f
/opt/openv/java/jre/amd64/java
/opt/openv/java/jre/java

Then do this
/opt/openv/java/jre/java -version
Java version "1.6.0_26"

I need the out put to say Java version "1.6.0_33"

I have the following in my NetBackup 7.1 envirement
Master server Solaris 10
media server Solaris 10
media server Windows 2008
media server Linux 2.6.16

So if someone knows if the patch updates java please let me know. Or if you have already installed the patch and are at 7.1.0.4. Can you run the commands above and tell me if the update, updated java?

thanks

[Will_Restore]

downloaded & unpacked 7.1.0.4 & I do not see any update for java

[cyberninja]

wr,

Thanks for looking. The file is usually something like this NB_JAV_7.1.0.4. Anyway I think I may get an answer from the Helpdesk. I will post it here when I get it.

[CRZ · Accepted solution]

Hi ninja,

These instructions are a bit old but should still work:

Java Runtime Environment (JRE) certification update for NetBackup 7.0 or higher
 http://www.symantec.com/docs/TECH148257

(if they don't, let me know and I'll see if we have anything more recent)

[cyberninja]

CRZ,

Wow thanks for the info. This better then what I usually get from tech support, but I still need to test it.

I usually get a .x update from Symantec that updates the java. Have you used this fix before? Will this work on both server and client?

[CRZ]

I haven't personally done it, but these instructions have been given out many times in the past when people call us with security concerns above and beyond the Java updates we include in maintenance releases.  It should work anywhere you have "our" Java installed.

(Could you please PM me your case ID?)

[cyberninja]

CRZ,

After I update the file can I remove the old out of date java file NetBackup was using?

[CRZ]

Sure - after you update the path, there won't be a need to keep the one in the old path if nothing's pointing to it (except your security scanner, of course ;) )

[CRZ]

By the way, here's output from my 7.5.0.1 master:

# cat /usr/openv/netbackup/version
HARDWARE SOLARIS
VERSION NetBackup 7.5.0.1
RELEASEDATE Sat Mar 31 00:39:58 CDT 2012
BUILDNUMBER 20120330

# cat /usr/openv/netbackup/bin/version
NetBackup-Solaris10 7.5.0.1

# /usr/openv/java/jre/bin/java -version
java version "1.6.0_29"
Java(TM) SE Runtime Environment (build 1.6.0_29-b11)
Java HotSpot(TM) Client VM (build 20.4-b02, mixed mode, sharing)

Guess I should apply 7.5.0.3 like I'm always telling everyone else ;)

I was looking for info on JRE version in 7.5.0.3 from its Release Notes (DOC5571).  I didn't find any there, but THIS caught my eye (page 35):

Oracle Corporation has announced the end-of-life for Java 6 in July 2012.
As a result, NetBackup does not support Java 6 in the next major release.

So there's something else to keep in mind...

[cyberninja]

Well basically, this is why I posted the issue here. I was looking for someone to tell me what the Java version they have, if there at 7.1.0.4. I'm currently at 7.1.0.2. If the NetBackup update also updated Java I would do this way.

As for this

Oracle Corporation has announced the end-of-life for Java 6 in July 2012.
As a result, NetBackup does not support Java 6 in the next major release.

Oracle still patches Java 4, which is up is up to 1.4.2_38.

NetBackup also has the same issue with OpsCenter having an old version of Apache. We just removed OpsCenter. I think OpsCenter is in the future going to replace the Java program. Is there a security team for NetBackup that keeps the 3rd party stuff patched?

[Will_Restore]

Ninja, since there is no update in 7.1.0.4 package you'd default to the same version you have now. 

OpsCenter 7.1 tomcat version is 6.0.29; OpsCenter 7.5 is 6.0.33 while Apache just came out with 6.0.35

Chris, tnx for link to TECH148257 !

[cyberninja]

Ok thanks. I just thought there would be one. I have Netbackup 7.1.0.2 with Java version "1.6.0_26" and CRZ has NetBackup 7.5.0.3 with Java version "1.6.0_28". So I was thinking .4 would give maybe _30 or _33?

Anyway thanks for your help.